Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: le17+NTKm+6QA8XFPtXpPTIh0ZGYH8CDWvoKKKJg6E8=
Subject key identifier: 16:E9:32:82:E4:6D:30:AE:12:C3:EB:19:33:41:A4:50:EE:20:5F:9B
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019DD577871A2620AE0D76E3729410D84D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 143C
Signing time: Tue 28 Apr 2026 19:01:13 +0000
Manifest this update: Tue 28 Apr 2026 19:01:13 +0000
Manifest next update: Wed 29 Apr 2026 19:01:13 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: Oa2DgFpDnW6OG+Ys2wkEHSe7wNOb4J1mTECe5TNi0rQ=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:77:87:1a:26:20:ae:0d:76:e3:72:94:10:d8:4d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Apr 28 19:01:13 2026 GMT
Not After : Apr 29 19:01:13 2026 GMT
Subject: CN=16e93282e46d30ae12c3eb193341a450ee205f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:c1:db:d1:86:5b:cc:40:61:04:71:12:b4:
80:fe:e6:e9:7c:e9:28:4c:2d:50:bc:24:a8:40:d5:
05:37:4a:18:e7:3a:a5:6d:a6:62:3a:b0:f1:61:28:
87:86:29:07:96:fe:91:75:96:47:f1:9c:cd:80:70:
94:b8:88:a6:bf:eb:48:c7:a1:78:a4:d9:4c:f7:b1:
76:47:c7:53:a9:a5:92:ec:72:bf:65:62:53:64:44:
67:a4:6f:60:67:4f:c1:d7:cc:be:1e:a7:22:a9:cc:
14:a8:9c:75:ec:a9:d9:c0:31:b5:47:26:cc:50:52:
c9:93:ca:00:cf:5b:40:7f:a8:a2:c7:dc:74:da:64:
31:18:b0:8b:47:92:ac:5e:f2:db:35:b6:73:06:bd:
10:c9:da:9d:9b:0d:3e:6f:2b:7c:ba:38:a4:a4:ef:
60:ef:93:1e:17:c5:fd:10:9a:db:89:6d:33:28:61:
ef:79:a9:84:26:88:86:c3:80:cd:05:a6:e1:8d:8b:
30:38:56:82:6c:1e:06:17:f4:3c:e2:34:10:4c:d0:
40:8b:28:56:3e:7e:33:4f:25:b2:29:38:c7:1c:42:
75:78:41:96:d3:23:72:e5:5d:8e:e0:a9:84:a1:59:
a5:fc:08:de:22:d3:c7:65:36:79:20:08:78:15:85:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:32:82:E4:6D:30:AE:12:C3:EB:19:33:41:A4:50:EE:20:5F:9B
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:c7:b5:9a:e9:50:a4:a4:24:83:7f:1b:81:35:34:2d:77:
d4:df:ac:37:bd:3f:df:f3:c5:b7:fe:b4:b7:32:6e:fa:2e:88:
60:c4:5f:d2:9f:94:19:84:b3:4d:23:8c:19:24:08:0b:39:3a:
58:19:01:96:d5:2d:f1:1f:30:ea:2f:78:78:38:c6:55:9e:5b:
65:22:0b:a1:30:2b:79:89:17:3a:1d:1a:ec:ec:ce:51:1e:b0:
b5:45:ca:96:7a:e8:7e:cb:cc:59:20:82:f1:4e:7c:7b:d5:1e:
82:b7:ca:ed:26:07:d3:e4:58:b9:eb:08:96:85:dc:74:bf:06:
d3:74:55:74:91:16:a4:38:46:e6:93:38:a3:ce:98:ee:8c:07:
71:a6:f7:32:d9:35:ba:c5:0c:bb:01:3e:ef:b2:f6:1e:f8:f8:
9e:24:97:a6:df:96:4a:a0:9d:ab:ff:0a:85:b0:d0:f4:69:9c:
d8:7a:80:5e:7c:ad:ff:ba:e1:4a:56:b9:98:64:d0:12:47:a4:
c6:d5:0e:9d:82:d7:6d:04:b9:65:f5:c6:33:d1:b4:0e:1a:bd:
b5:27:6d:0e:58:a4:b3:42:86:2f:3a:59:53:7b:e9:b4:d3:4e:
88:10:b4:18:aa:7e:2b:30:1a:58:24:53:35:ec:bf:1a:3e:ff:
b4:29:a6:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Vd4caJiCuDXbjcpQQ2E0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4
NTRmOWMwHhcNMjYwNDI4MTkwMTEzWhcNMjYwNDI5MTkwMTEzWjAzMTEwLwYDVQQD
EygxNmU5MzI4MmU0NmQzMGFlMTJjM2ViMTkzMzQxYTQ1MGVlMjA1ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97B29GGW8xAYQRxErSA/ubpfOko
TC1QvCSoQNUFN0oY5zqlbaZiOrDxYSiHhikHlv6RdZZH8ZzNgHCUuIimv+tIx6F4
pNlM97F2R8dTqaWS7HK/ZWJTZERnpG9gZ0/B18y+HqciqcwUqJx17KnZwDG1RybM
UFLJk8oAz1tAf6iix9x02mQxGLCLR5KsXvLbNbZzBr0Qydqdmw0+byt8ujikpO9g
75MeF8X9EJrbiW0zKGHveamEJoiGw4DNBabhjYswOFaCbB4GF/Q84jQQTNBAiyhW
Pn4zTyWyKTjHHEJ1eEGW0yNy5V2O4KmEoVml/AjeItPHZTZ5IAh4FYVIIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbpMoLkbTCuEsPrGTNBpFDuIF+bMB8GA1UdIwQY
MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt
MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5
LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrfHtZrp
UKSkJIN/G4E1NC131N+sN70/3/PFt/60tzJu+i6IYMRf0p+UGYSzTSOMGSQICzk6
WBkBltUt8R8w6i94eDjGVZ5bZSILoTAreYkXOh0a7OzOUR6wtUXKlnrofsvMWSCC
8U58e9UegrfK7SYH0+RYuesIloXcdL8G03RVdJEWpDhG5pM4o86Y7owHcab3Mtk1
usUMuwE+77L2Hvj4niSXpt+WSqCdq/8KhbDQ9Gmc2HqAXnyt/7rhSla5mGTQEkek
xtUOnYLXbQS5ZfXGM9G0Dhq9tSdtDliks0KGLzpZU3vptNNOiBC0GKp+KzAaWCRT
Ney/Gj7/tCmmWw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 00:01:18 2026 by rpki-client